xyz.gardenpatch/gardenpatch
xyz.gardenpatch/gardenpatchgardenpatch.xyzstreamable-httpv1.0.0Scanned
Paid per call over x402: growth coaches, small utilities and real-world actions. USDC on Base.
9 tools: 4 change things and 5 only read.
- Reads private data · 0
- Reads text others write · 0
- Can send data out · 0
- No findings
Anlyon alternative
4 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
9 tools
Changes things 4Claude Code: ask
call_actionPaid.No findings
Why it is in this group
- The name "call_action" says "call": a word for a change.
Description, as the server wrote it Paid. HAS A REAL-WORLD SIDE EFFECT: it puts a message in front of an actual person. Requires a consent block stating how and when that person agreed to be contacted. There is no sandbox for this — a simulated send cannot be told apart from a real one. Retries are safe with the same idempotency key; a new key means a genuine second send.
call_coachPaid, from $0.18 per call, settled in USDC on Base over x402.No findings
Why it is in this group
- The name "call_coach" says "call": a word for a change.
Description, as the server wrote it Paid, from $0.18 per call, settled in USDC on Base over x402. Returns a growth diagnosis, the arithmetic behind it, concrete actions, and a typed deliverable. Without payment this returns the payment requirements as a structured error you can settle and retry. Try sandbox_call first if you only need to see the shape.
call_toolPaid, from $0.01 per call, settled in USDC on Base over x402.No findings
Why it is in this group
- The name "call_tool" says "call": a word for a change.
Description, as the server wrote it Paid, from $0.01 per call, settled in USDC on Base over x402. Runs one utility and returns its result. Tools contact no one and store nothing; website signals reads only the one public page you name. A request refused for its input is never charged.
sandbox_callFree, and no wallet needed.No findings
Why it is in this group
- The name "sandbox_call" says "call": a word for a change.
Description, as the server wrote it Free, and no wallet needed. Returns a schema-valid sample response for a mode: same envelope, same field names, same deliverable shape as a paid call. It is a fixed sample for the mode, not an answer to your input — that is what makes it free. Build your integration against this first.
Only reads 5Show 5 read-only tools
get_receiptFree.No findings
Why it is in this group
- The name "get_receipt" says "get": a word for reading.
Description, as the server wrote it Free. Returns a call you already paid for: amount, mode, usage, and the deliverable again. Only the wallet that paid can read it, and only while the receipt has not expired.
get_schemaFree.No findings
Why it is in this group
- The name "get_schema" says "get": a word for reading.
Description, as the server wrote it Free. The published request or response JSON Schema for one mode or one action. Use it to build a request you know will validate before you pay for it.
list_actionsFree.No findings
Why it is in this group
- The name "list_actions" says "list": a word for reading.
Description, as the server wrote it Free. The catalog of paid real-world side effects, such as sending a review request. An action does something rather than returning advice, so it carries consent rules a coach call does not.
list_coachesFree.No findings
Why it is in this group
- The name "list_coaches" says "list": a word for reading.
Description, as the server wrote it Free. The catalog of 7 growth coaches, the 16 modes they sell, and the current price of each. Call this first — it is generated from the same registry the paid endpoint validates against, so it is never stale.
list_toolsFree.No findings
Why it is in this group
- The name "list_tools" says "list": a word for reading.
Description, as the server wrote it Free. The catalog of 5 small paid utilities (QR codes, time zone conversion, Markdown to HTML, calendar .ics files, website growth signals) with each one's price, request schema and a worked example. One endpoint, one job, one payment.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or untrusted-input or outbound.
- Reads private data0
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write0
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out0
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http gardenpatch https://gardenpatch.xyz/mcpclaude mcp add --transport http gardenpatch https://gardenpatch.xyz/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__gardenpatch__list_coaches",
"mcp__gardenpatch__list_actions",
"mcp__gardenpatch__list_tools",
"mcp__gardenpatch__get_schema",
"mcp__gardenpatch__get_receipt"
],
"ask": [
"mcp__gardenpatch__sandbox_call",
"mcp__gardenpatch__call_coach",
"mcp__gardenpatch__call_action",
"mcp__gardenpatch__call_tool"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as gardenpatch. Review it before you use it.
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/xyz.gardenpatch/gardenpatch/verify?hash=5a67049ac88c22f32cb44035dcc26f48f7238af9c0fb1a514c7f6243cfc81279" | jq -e '.changed == false'Pinned hash 5a67049ac88c, from Oct 22, 2026, 16:18 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/xyz.gardenpatch/gardenpatch/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/xyz.gardenpatch/gardenpatch)Source: MCP Registry. Synced Oct 22, 2026, 16:18 UTC.